code-wsl-rce

Proof of Concept for VS Code Remote WSL Remote Code Execution - CVE-2021-43907 See the blog at https://parsiya.net/blog/2021-12-20-rce-in-visual-studio-codes-remote-wsl-for-fun-and-negative-profit. Also https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-43907. Building 1. npm install...

CVE-2021-44827

CVE-2021-44827 A PoC for CVE-2021-44827 - authenticated remote code execution in Tp-link Archer C20i Write-up: https://full-disclosure.eu/reports/2022/CVE-2021-44827-tplink-authenticated-remote-code-execution.html Example $ python exploit.py error0 error0 Run postexploitcmd Trying 192.168.0.1...

CVE-2024-6387_poc

CVE-2024-6387 Proof of Concept PoC Description This repository contains a PoC for vulnerability CVE-2024-6387, which targets a signal handler race condition in the OpenSSH server sshd on glibc-based Linux systems. The vulnerability allows remote code execution as root by calling...

CVE-2026-11645

CVE-2026-11645 - V8 in Google Chrome prior to Remote Code Execution Quick Usage python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-06-09 Technical Summary Out...

CVE-2020-0688-Scanner

CVE-2020-0688-Scanner Quick C tool for checking CVE-2020-0688 on multiple hosts with a non-intrusive method. Features Scan hosts from an input file. Passive check : grab exchange version by scraping html content. Produces an output file. Demo How to use Prerequisite Windows .NET framework 4.5.2...

CVE-2023-36844

CVE-2023-36844 The "Remote Code Execution in Juniper JunOS within SRX and EX Series products" vulnerability is a security issue that allows an attacker to execute arbitrary code on a targeted Juniper device running JunOS software. This vulnerability could potentially lead to a compromise of the...

React2Shell-CVE-2025-55182-Testing-Environment

React2Shell CVE-2025-55182 Testing Environment A containerized testing environment for CVE-2025-55182, a critical 10.0 CVSS Remote Code Execution vulnerability in React Server Components. ⚠️ WARNING This environment is intentionally vulnerable and should ONLY be used for: Security research and...

CVE-2025-31324

CVE-2025-31324 Proof-of-Concept 0day for SAP NetWeaver created by ShinyHunters CVE-2025-31324 is a critical "Unrestricted File Upload" vulnerability affecting the SAP NetWeaver Application Server AS Java. Specifically, it resides within the Visual Composer component VCFRAMEWORK. The flaw allows a...

CVE-2024-28255

OpenMetadataRCE CVE-2024-28255 Batch scan/exploit 1.このツールはセキュリティテストのみに使用されており、違法な攻撃については責任を負いません. 2.The tool is only used for security testing, and I am not responsible for any illegal attacks. 3.工具仅用于安全测试，任何非法攻击本人概不负责. Help Need to modify the DNS address in line 9 of the code. python3...

react2shell-CVE-2025-55182

React2Shell Exploit CVE-2025-55182 Python exploit for Next.js React Server Components RCE vulnerability with HTTP/HTTPS support. 🚀 Quick Start Clone & run git clone https://github.com/BrianLopezM99/react2shell-CVE-2025-55182.git cd react2shell-CVE-2025-55182 python3 exploitreact2shell.py "" 📖 Usa...

craft-cms-RCE-CVE-2024-56145

craft-cms-RCE-CVE-2024-56145 A POC lab environment for CVE-2024-56145 CraftCMS RCE. Vulnerability Description A potential RCE vulnerability is found in craftCMS if the registerargcargv option is enabled in php.ini. This is a POC lab environment where you can reproduce and exploit the bug. The ful...

Wazuh-RCE

Intro Wazuh RCE 8.4...

CVE-2021-26700

RCE in NPM VSCode Extension Fixed 10th February 2021 in https://github.com/microsoft/vscode-npm-scripts/commit/cdd5e507564e0cc0f60bcccf184822be3fd73e07 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26700 Summary Remote code execution vulnerability in the eg2.vscode-npm-script...

CVE-2024-30270-PoC

This script is designed to exploit vulnerabilities in a Mailcow instance using Cross-Site Scripting XSS and Remote Code Execution RCE. The script aims to: Inject an XSS payload into a Mailcow web interface. Use the XSS payload to execute unauthorized actions. Achieve RCE by overwriting a server...

cve-2019-6453-poc

CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument list, an attacker is...

CVE-2021-21974_vuln_dectection

CVE-2021-21974 Vulnerability Detector A Python-based security tool for detecting CVE-2021-21974 vulnerability in SLP Service Location Protocol implementations, specifically targeting VMware ESXi systems. This tool performs safe, non-exploitative detection by analyzing SLP service responses and...

CVE-2022-3552

CVE-2022-3552 BoxBilling=4.22.1.5 - Remote Code Execution RCE Usages python3 .\CVE-2022-3552.py -d http://192.168.228.143 -u [email protected] -p [email protected]...

CVE-2025-47812-poc

CVE-2025-47812 Wing FTP Server Remote Code Execution RCE Exploit CVE-2025-47812 📌 Credit : Vulnerability discovered by Julien @MrTuxracer. This PoC implementation is based on their original research. This repository hosts a Python exploit for the Wing FTP Server Remote Code Execution RCE...

Chamilo-CVE-2023-4220-RCE-Exploit

CVE-2023-4220 Chamilo LMS Unauthenticated Big Upload File Remote Code Execution Overview This repository contains a proof-of-concept PoC exploit for the vulnerability identified as CVE-2023-4220 in Chamilo LMS. This exploit leverages an unauthenticated file upload vulnerability, allowing remote...

cve-2023-34040

CVE-2023-34040 Spring Kafka Deserialization Remote Code Execution POST /messages/send HTTP/1.1 Host: 127.0.0.1:8899 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10157 AppleWebKit/537.36 KHTML, like Gecko Chrome/116.0.0.0 Safari/537.36...